Description
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka "ISATAP Vulnerability."
References
- 1021374 vdb-entry
- oval:org.mitre.oval:def:5689 vdb-entry signature
- TA08-344A third-party-advisory
- 1021375 vdb-entry
- 33058 third-party-advisory
- ADV-2008-3388 vdb-entry
- 32654 vdb-entry
- MS08-076 vendor-advisory